Top 10 – WordPress Popular posts by WebberZone, 788504e5b8a8ce5c28a1628eddbc0ec73072b0f6
- CVE, Research URL
- Published on
- Feb 22, 2023
- Research Description
- WebberZone Top 10 — Popular Posts [top-10] < 3.2.5 Top 10 – Popular posts plugin for WordPress <= 3.2.4 - Missing Authorization on tptn_chart_data The Top 10 – Popular posts plugin for WordPress is vulnerable to insufficient access control in the 'tptn_chart_data' AJAX action in versions up to, and including, 3.2.4. This allows authenticated attackers to access chart data granted they can access the admin dashboard and retrieve the nonce used for access control.
- Affected versions
-
max 3.2.5.
- Status
-
vulnerable